From 49f5d4ce2c9ecaef208ec44763243dda7b4b49b1 Mon Sep 17 00:00:00 2001
From: Farhan Khan <farhan@farhan.codes>
Date: Mon, 6 Apr 2026 23:31:29 -0400
Subject: [PATCH] Docker file dependency + non-root checking

---
 Dockerfile | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index f6ce5b4..cae8124 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -27,11 +27,14 @@ WORKDIR /app/role-manager
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -o server
 
 # ---- Runtime Stage ----
-FROM gcr.io/distroless/base-debian12
+FROM debian:bookworm-slim
 
 WORKDIR /app
 COPY --from=builder /app/role-manager/server .
 
+RUN groupadd -r nonroot && useradd -r -g nonroot nonroot && chown -R nonroot:nonroot /app
+
+
 EXPOSE 8080
 USER nonroot:nonroot
 ENTRYPOINT ["/app/server"]
\ No newline at end of file